v2.3.1

v2.3.1 — No arbiter slot front-running; Browse gets cleaner

Compatibility: SOFT — additive reducer rule + a UI move. No wire-format change.
Works across v2.0.x–v2.3 in any mix.

Arbiter slot can't be front-run (closes the last gap in the door)

• v2.3 made sure a listing's arbiters are community-recognized. This closes the
  sibling gap: in a fresh trade the auto-assigned arbiter is only a preview
  until the lock seats them — so a legit pool member who ISN'T the
  deterministically-assigned arbiter could race a join and seat themselves on a
  trade they wanted to sway. Provenance was happy (they're in the pool); the
  deterministic assignment was quietly defeated.
• Now only the arbiter the trade id deterministically selects may join-seat the
  slot before lock; any other pool member is denied loudly (ARBITER_NOT_ASSIGNED).
  Substitution and healing are untouched — backups never join, they step in by
  voting after the grace window — so nobody legitimate is locked out.

Browse is view-only; switching your Chama moved to Me

• The community pill on Browse was a full switcher that ate a row of screen and
  made changing your Chama a too-casual, anytime action. It's now a clean
  view-only chip that just shows which Chama you're browsing as — the dropdown
  and its real estate are gone.
• Changing your Chama now lives in Me › Your Chama, where it belongs as a
  deliberate, between-trades choice. While you're in a live trade it's held back
  with a plain reason — your locked sats live on that Chama, and switching would
  put your claim on hold until you switch back. Idle, you pick freely; the same
  funds-at-risk confirmation as before still applies.

History reads like history (My Trades)

• Your own trade cards used to print "Seller · X" twice when you were the buyer.
  Now a settled trade shows BOTH parties — Buyer · … and Seller · …, with your
  own side marked "You" — plus the unique trade ID right on the card. Two trades
  with the same person and the same title are now told apart at a glance, and the
  id is tap-to-copy for audit, disputes, or support. The country flag stays.

Small polish

• The community-verified arbiter badge no longer crowds the participant ring —
  it gets room to breathe.
• Me › Advanced's raw route switcher now says what it's for (custom / non-listed
  federations), pointing you to Me › Your Chama for everyday community changes.
  Both are kept on purpose — one switches your community, the other a raw fed.

Numbers

• 2,212 tests green, including the new assigned-arbiter join gate (the assigned
  arbiter joins; a non-assigned pool member is denied) alongside the existing
  pool-membership and provenance checks.